A lot of this will depend on when the script runs during the boot process. Each time a machine boots it re-evaluates group membership and generates a token. As for how to get this info without contacting a domain controller, the output of GPRESULT will show it.
HTH Christopher Bodnar Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture and Engineering Services Tel 610-807-6459 3900 Burgess Place, Bethlehem, PA 18017 [email protected] The Guardian Life Insurance Company of America www.guardianlife.com From: James Rankin <[email protected]> To: [email protected] Date: 06/06/2013 09:53 AM Subject: [NTSysADM] PowerShell query Sent by: [email protected] Is it possible to use PowerShell to enumerate the group memberships for a computer from the security token? That is, in a way that it will return the group memberships even if AD DC connectivity is not available (for instance, at boot time)? Google-fu seems lacking on this subject, after a few efforts... Cheers, -- James Rankin Technical Consultant (ACA, CCA, MCTS) http://appsensebigot.blogspot.co.uk ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.
<<image/jpeg>>
